io_uring: fix io_req_prep_async with provided buffers

io_req_prep_async() can import provided buffers, commit the ring state
by giving up on that before, it'll be reimported later if needed.

BUG=b/397181540
TEST=presubmit
RELEASE_NOTE=None

cos-patch: security-high
Reported-by: Muhammad Ramdhan <[email protected]>
Reported-by: Bing-Jhong Billy Jheng <[email protected]>
Reported-by: Jacob Soo <[email protected]>
Fixes: c7fb19428d67d ("io_uring: add support for ring mapped supplied buffers")
Change-Id: Id3dd6ac0b816e6082b5865252fac9cd59dc56b6e
Signed-off-by: Pavel Begunkov <[email protected]>
Signed-off-by: Greg Kroah-Hartman <[email protected]>
Reviewed-on: https://cos-review.googlesource.com/c/third_party/kernel/+/93580
Reviewed-by: Anil Altinay <[email protected]>
Tested-by: Cusky Presubmit Bot <[email protected]>
1 file changed